Jack

An issue involving insecure storage of sensitive keys was identified in MyASUS. This could potentially allow an unauthorized actor to obtain a token used for communication with certain services.

The issue was addressed with improved memory handling. Processing a maliciously crafted gcx file may lead to unexpected app termination or arbitrary code execution.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `loc id` parameter in a `list events` action to `mod.php`.